Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46DF03F4A28E11F0A15677CCDAE4EC9C.roa
File: 46DF03F4A28E11F0A15677CCDAE4EC9C.roa (raw, json)
Hash identifier: R3dbRZvLJIUWVwUIbkNfqACEpD+7XpS3PzLpYwj7buo=
Subject key identifier: 33:8E:94:47:0B:6B:7A:7D:98:34:7C:D6:62:03:38:3F:DA:00:BC:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 017EF0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46DF03F4A28E11F0A15677CCDAE4EC9C.roa
Signing time: Mon 06 Oct 2025 08:27:21 +0000
ROA not before: Mon 06 Oct 2025 08:27:16 +0000
ROA not after: Sat 10 Jan 2026 08:27:16 +0000
asID: 272018
IP address blocks: 156.235.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98032 (0x17ef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 6 08:27:16 2025 GMT
Not After : Jan 10 08:27:16 2026 GMT
Subject: CN=68e37d69-3367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:26:41:e1:be:a7:37:aa:8c:c0:9a:1e:9e:
cd:cc:ee:5f:72:cf:20:06:6f:11:3f:84:c0:fd:a9:
6d:9f:7d:7e:8f:16:95:44:ab:28:4f:62:52:9c:ff:
ab:d6:a8:8c:36:61:e2:c9:e2:1b:4b:92:bb:00:c7:
fc:31:7f:c7:dd:bd:5c:d0:75:79:34:33:a8:31:b0:
47:91:8c:4a:3f:11:57:4b:24:46:28:b5:05:38:d5:
72:14:8f:eb:77:58:8d:70:fd:72:1b:ad:3f:c6:83:
68:2d:3e:95:f6:4d:08:00:de:59:aa:12:bb:a3:a4:
41:0b:ec:cc:8f:9d:0a:97:d7:e8:69:df:c3:5f:6d:
96:c3:32:af:fc:50:3c:23:46:23:44:1c:12:77:e6:
ab:bb:e2:b3:9b:94:f7:94:36:d3:3d:b2:14:b9:f3:
e0:df:a1:f0:06:b1:86:ab:43:c6:a8:6a:0a:84:e0:
76:c5:1d:c3:17:ba:af:13:6b:93:66:90:06:04:c9:
ae:7e:ec:12:9e:25:e3:bc:4f:e4:2b:9a:16:e5:da:
72:af:0d:94:66:1d:f7:a4:84:75:1a:e2:3f:9f:98:
bc:a6:cf:06:da:71:eb:0c:5e:4a:b3:06:fa:a3:0a:
b1:e1:0c:35:2c:d9:f4:a9:1a:11:86:02:77:7d:60:
a1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8E:94:47:0B:6B:7A:7D:98:34:7C:D6:62:03:38:3F:DA:00:BC:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46DF03F4A28E11F0A15677CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.235.90.0/24
Signature Algorithm: sha256WithRSAEncryption
81:df:7a:87:62:eb:f5:51:5a:ed:b6:72:54:67:36:81:a2:98:
16:a3:24:42:57:dc:d5:66:46:ed:eb:7c:63:18:2a:1d:8a:66:
34:46:45:48:49:c3:4a:ff:84:94:fd:7d:1b:05:d4:c9:8a:2c:
7a:52:85:06:1b:55:a3:86:0c:97:ad:07:03:2c:63:fa:94:fe:
22:a0:fa:2c:86:83:21:c2:65:f3:6a:20:11:9e:27:0c:fc:7e:
cf:d3:45:96:0e:0b:e6:9e:78:8c:62:8f:0c:9b:3a:45:5a:0c:
9d:31:3b:e9:ef:e2:26:86:ca:c0:cd:f0:a5:8c:e5:c3:b8:0f:
7c:fa:48:4c:06:85:8d:fd:14:34:f3:5e:ab:b7:b9:41:af:1e:
61:85:4f:2f:f3:9d:ad:c9:63:aa:3e:dd:7e:c1:b0:73:34:75:
fe:d7:79:ce:3c:c9:fe:bd:e7:f6:f2:b2:6b:65:8b:5f:03:37:
9e:f8:cf:1f:65:81:90:ae:f2:c1:c5:20:93:a7:9d:7a:6f:be:
74:d8:61:a5:70:2b:74:a5:aa:f4:00:76:38:30:03:26:fd:c1:
36:eb:a0:27:43:c8:44:bf:a0:27:1c:5d:b8:3f:0a:3f:b0:d7:
44:40:a9:bb:1a:d1:29:f8:e7:4a:7b:f1:50:64:91:c0:d1:2e:
0d:b0:d0:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 11:33:54 2025 by rpki-client